Privacy Policy

Effective date: 9 September 2026

This Privacy Policy explains how Big Power Parts, operated by ML GROUP BUSINESS PTY LTD (ABN 52 669 512 449) ("Big Power Parts", "we", "us" or "our"), collects, holds, uses and discloses personal information when you visit our website, create an account, place an order, contact us, or otherwise deal with us.

Our website is https://bigpowerparts.com.au. You can contact us at:

• Email: support@bigpowerparts.com.au
• Phone: +61 435 187 868
• Address: 38 Stephen Road, Dandenong South VIC 3175, Australia

1. Privacy law

We handle personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply to us. If the Privacy Act does not strictly apply to us because of our business size, we still aim to handle personal information responsibly and consistently with this policy.

2. Personal information we collect

The personal information we collect depends on how you interact with us. It may include:

• name, business name, delivery address and billing address
• email address and phone number
• account login details and account preferences
• order history, enquiries, returns, warranty claims and customer service records
• vehicle, equipment, machine model, serial number, part number or fitment information you give us
• payment and transaction details. Card details entered in our online checkout are handled by Stripe; our store receives transaction references and payment status rather than your full card number
• website usage information, device information, IP address, browser type, pages viewed and referral source
• marketing preferences and communications with us.

We may also collect information from third parties, such as payment providers, delivery providers, fraud prevention services, product suppliers, manufacturers, public sources, or someone acting on your behalf.

3. How we collect personal information

We collect personal information when you:

• create or update an account
• place an order or request a quote
• contact us by phone, email, form, chat, social media or another channel
• subscribe to marketing communications
• submit a return, refund, warranty or support request
• use our website, including through cookies, analytics tools and similar technologies.

If you do not provide the information we reasonably need, we may not be able to process your order, create an account, deliver products, respond to your enquiry, assess a return or warranty claim, or provide customer support.

4. Why we use personal information

We use personal information to:

• create and manage customer accounts
• process orders, payments, refunds and invoices
• pick, pack, ship and track orders
• communicate about orders, product availability, delivery, returns and warranty claims
• verify identity, prevent fraud and protect our website and business
• assess product suitability, fitment enquiries and customer support requests
• improve our website, product range, stock planning and customer service
• send advertisements, newsletters, offers and product updates where we have your consent as required by applicable law
• comply with legal, tax, accounting, regulatory, insurance and dispute resolution obligations.

We may use de-identified or aggregated information for analytics, reporting and business improvement.

5. Direct marketing

Our registration form includes an optional checkbox for email newsletters and promotional offers. It is selected by default; you can untick it before creating your account. We record your submitted preference, the date, the wording shown and that the checkbox was preselected. Marketing preferences are separate from accepting our terms or reading this policy. We send marketing only where we have consent as required by applicable law. You can withdraw consent at any time using the unsubscribe option in a marketing message or by contacting us. This newsletter preference does not cover abandoned-cart marketing reminders.

We may still send non-marketing messages that are necessary for your account, orders, payments, delivery, returns, warranty claims, safety notices, product recalls, policy updates or legal notices.

6. Cookies and analytics

Our website uses account and cart cookies and integrates Stripe payments, Google address search, Google Tag Manager and Vercel performance monitoring. Google Tag Manager can load analytics or advertising tools according to our configuration. Our website may use cookies, pixels and similar technologies to operate the website, keep you signed in, remember preferences, measure website performance, improve our services, and deliver or measure advertising. You can adjust cookie settings in your browser, but some website functions may not work properly if cookies are disabled.

7. Who we disclose personal information to

Our main website and communication service providers are:

• Vercel, which hosts our shopfront
• Amazon Web Services (AWS), which hosts our backend services in the Sydney region, Australia
• Google (Gmail), which provides our customer email service
• Stripe, which processes online card payments.

These providers handle personal information where needed to deliver their services. We may also disclose personal information to:

• payment processors, banks and fraud prevention providers
• delivery, courier, freight and logistics providers
• ecommerce, hosting, cloud, email, analytics, CRM and IT service providers, including Google (Gmail) for customer email communications
• manufacturers, distributors and suppliers where needed for product enquiries, special orders, warranty claims, technical support or recalls
• professional advisers, insurers, auditors and debt collection providers
• regulators, law enforcement, courts, tribunals or dispute resolution bodies where required or permitted by law
• a buyer or prospective buyer of our business or assets, subject to appropriate confidentiality arrangements
• other parties where you authorise us or where disclosure is required or permitted by law.

8. Overseas disclosure

Some of our service providers, including providers of hosting, email, payments and analytics, may store, process or access personal information outside Australia. Using Australian hosting for our backend does not mean that all information handled by these providers remains in Australia. Overseas handling depends on the services we use and their arrangements.

Where required by law, we take reasonable steps to ensure overseas recipients handle personal information consistently with Australian privacy requirements.

9. Security

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure. These steps may include access controls, secure hosting, encrypted payment processing, account authentication, staff access limits and data backup procedures.

No internet transmission or storage system is completely secure. You are responsible for keeping your account login details confidential and notifying us promptly if you suspect unauthorised account access.

10. Retention

We keep personal information for as long as reasonably needed for the purposes set out in this policy, including order records, warranty records, legal compliance, accounting, tax, insurance and dispute management. When information is no longer needed, we will take reasonable steps to destroy or de-identify it, unless we are required or permitted by law to keep it.

11. Access and correction

You may request access to personal information we hold about you, or ask us to correct it if it is inaccurate, out of date, incomplete, irrelevant or misleading. We may need to verify your identity before responding. We may refuse access or correction where permitted by law, and if we do so, we will explain why where reasonable.

12. Privacy complaints

If you have a privacy concern or complaint, contact us using the details above and include enough information for us to understand and investigate the issue. We will aim to respond within a reasonable time.

If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner to ask whether it can assist with your complaint at www.oaic.gov.au.

13. Changes to this policy

We may update this Privacy Policy from time to time. The current version will be published on our website with its effective date. If changes are material, we may take reasonable steps to notify account holders or customers.